about Access Policy questiong

[jingming66]

I uploaded some images to the bucket "test" and then accessed "* * * *: 9000/test", will list all the images. I think this is unsafe. Is there any way to handle it? For example, only one correct address can be accessed